Compliance articles and resources

MiCA regulates the authorization and operation of crypto-asset service providers in the EU, while the EU AML framework governs how those businesses prevent money laundering and terrorist financing. MiCA does not replace AML requirements: authorized CASPs must comply with both, including customer due diligence, beneficial-owner checks, sanctions and PEP controls, transaction monitoring and suspicious-activity reporting.

The MiCA transitional period that let pre-existing crypto-asset service providers keep operating without authorization ended on 1 July 2026 in every member state, with no extension mechanism in the regulation. Authorized CASPs continue EU-wide with passporting rights. CASPs without authorization must stop serving EU clients now and wind down in an orderly way, or face fines, suspension or forced closure by national authorities.

MiCA compliance for CASPs in 2026 rests on three operational pillars: a complete set of MiCA-native policies under Articles 68 to 73, evidence that staff meet the ESMA knowledge and competence rules that apply from 28 July 2026, and a whistleblowing channel that satisfies MiCA, the Whistleblower Directive and DORA at once. Authorisation is the start; the evidence of daily operation is what supervisors measure.

The Trusty FinTech Booster Pack standardises compliance across a partner network: one set of policies distributed to merchants, agents, distributors and third-party providers, proof that each partner has read and been trained on them, built-in sanctions and PEP screening, and real-time visibility for the licensed institution. It turns fragmented, manual partner oversight into a system that regulators can audit.